Package rekall :: Package plugins :: Package windows :: Module pagefile :: Class WindowsPDEDescriptor
[frames] | no frames]

Class WindowsPDEDescriptor

source code


Instance Methods
 
__init__(self, pte_type=None, pte_value=None, pte_addr=None, object_name=None, session=None)
Define a windows PTE object. (Inherited from rekall.plugins.windows.pagefile.WindowsPTEDescriptor)
source code
 
render(self, renderer)
Render this step. (Inherited from rekall.plugins.windows.pagefile.WindowsPTEDescriptor)
source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
  object_name = 'pde'
hash(x)
  default_pte_type = None
hash(x) (Inherited from rekall.plugins.windows.pagefile.WindowsPTEDescriptor)
Properties

Inherited from object: __class__